Courses

Overview of common threat types at an awareness, non-technical level, such as:

• Phishing and social engineering attempts.
• Basic malware concepts (viruses, ransomware, trojans) – high-level only.
• Password guessing and unauthorised access attempts.
• Simple web- and email-based threats.
• Recognising typical warning signs of suspicious messages, links, or requests.
• Human factors: why people click, share, or reuse passwords, and how habits impact security.
• Building personal vigilance and encouraging a culture of “think before you act” in digital environments.

Conceptual understanding of technical and procedural controls, including:

• Authentication and access control at a basic level.
• Updates and patching: why keeping software current helps reduce risk.
• Backups and data recovery awareness.
• Basic endpoint protection (e.g. antivirus/anti-malware tools – conceptual only).
• Secure use practices for passwords, multi-factor authentication (MFA), and account management.
• Safe use of devices: laptops, mobile devices, removable media, and shared workstations.
• Working securely in different contexts: office, home, remote, and public locations.

• Role of policies, standards, and procedures in supporting cybersecurity.
• Typical organisational documents at an awareness level: acceptable use policy, password policy, incident reporting procedure, and data handling guidance.
• Good practice in storing, transmitting, and disposing of information, including basic awareness of encryption use at a conceptual level.
• High-level awareness that different jurisdictions have data protection and privacy requirements (e.g. obligations to protect personal data – no legal advice or detailed interpretation).
• Supporting compliance: following instructions, reporting issues, and helping with training efforts.

• What constitutes a potential cybersecurity incident at a basic awareness level.
• The importance of rapid reporting and not attempting to “cover up” mistakes or suspected issues.
• Simple incident response concepts: detection, reporting, initial containment support, and communication – under the guidance of specialists.
• The role of logs, basic documentation, and clear communication in supporting incident handling (non-technical).
• Connection between cybersecurity and business continuity: backups, alternative access, and recovery priorities at a conceptual level.

• Ethical principles in cybersecurity: respect for privacy, non-misuse of access, integrity, and compliance with laws and policies.
• Distinguishing between ethical defensive work and prohibited activities (e.g. unauthorised access, data theft, deliberate damage).
• Responsible use of security knowledge: not sharing or using information to facilitate attacks.
• Professional conduct: documentation, communication, teamwork, and respecting role boundaries.
• Mapping potential career pathways in cybersecurity: awareness of roles such as analyst, engineer, auditor, consultant (high-level), and the need for further specialised study and certifications.